General

  • Target

    https://es.sempra-infra.splunkcloud.com/en-US/app/SplunkEnterpriseSecuritySuite/search?q=search%20index%3Dglobal_proofpoint%20sender%3Dfacturacion%40grupocodesi.com.mx&earliest=1715497860&latest=1715526660&display.page.search.mode=verbose&dispatch.sample_ratio=1&display.page.search.tab=events&display.general.type=events&sid=1715546452.1529444#

Score
8/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: searchindex=global_proofpointsender=facturacion@grupocodesi.com.mx

Files